Thanks, interesting, I like making my systems as stand-alone capable as possible :)
What is the primary difference between using an Unbound auth-zone (as described in the RFC) compared to localroot?
What is the primary difference between using an Unbound auth-zone (as described in the RFC) compared to localroot?
Both methods are fine. It would be best if unbound does ZONEMD checking to ensure the file you receive is properly protected from modification from any network in the middle, and I don't remember without looking what version (and if) Unbound does this. If they don't yet, it's coming soon. With the LocalRoot service at ISI, the TSIG protection gives you this (and is older than the ZONEMD record that is now available in the root zone).